CVE-2017-18580 WordPress Shortcodes Plugin — Shortcodes Ultimate <= 5.0.0 - Authenticated Remote Code Execution
CriticalCVSS 9.8
EPSS 12.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| getshortcodes shortcodes ultimate | < 5.0.1 | 5.0.1 |
| wordpress shortcodes-ultimate(WordPress) | < 5.0.1 | 5.0.1 |
References
- wordpress.org release-notes
- Wordfence Intelligence third-party-advisory
- www.cve.org